Information Security Analyst

Information Security AnalystJob Summary:The Information Security Analyst will support the Information Security Officer in maintaining Governance, Risk Management, and Compliance standards across IT and Digital environments. Security analysts are essential to maintaining security integrity across the company’s IT and OT systems, ensuring that operations comply with the established global governance.This role is part of a global organization characterized by rich cultural diversity, local and global operational requirements, and complex technology landscapes. Due to the geographical distribution of the team and the absence of a local team in Argentina, the position requires a constant routine of meetings. The team operates under a rotating activity model among its members and works onsite 2 days per week at the office.Key Responsibilities:● Ensure alignment with the Global Security Framework.● Enforce policies, procedures, and guidelines.● Define risks, remediation plans, and compensating controls through Deviation Treatment Action Plans (DTAPs).● Conduct Security Risk Assessments using Group tools and processes.● Review risks for suppliers, service providers, third parties, and partners.● Lead the compliance process for critical digital assets, including communication with stakeholders, reporting, evidence review, and maintenance of the compliance index.● Identify privacy and other regulatory requirements, including AI assessments.● Assess compliance throughout the lifecycle of data and applications (CDAs, Global ERPs).● Assist in the management and simulation of cyber crises.● Coordinate incident response with stakeholders to minimize impacts.● Support Digital and IT Audits with responses and evidence of controls.● Lead the scope, logistics, and execution of penetration testing for IT and OT.● Act as a specialist within the organization and participate in the internal rotation of the team’s operational activities.Mandatory Requirements:● Primary Domain: Strong experience focused on Governance, Risk Management, and Compliance (GRC), not necessarily restricted to the cybersecurity area.● Experience and Certifications: Strong emphasis on years of practical experience in the field and relevant certifications (such as CISSP, CISM, CGRC, CRISC, or equivalent GRC certifications).● Academic Background: Flexible regarding a Bachelor’s/Undergraduate degree. Greater focus on certifications.● Professional Experience: 4 to 7 years of experience in Risk Management, Compliance, and/or Security.● Languages: Advanced/fluent English (C1 Level).● Availability: High availability and ability to manage an intensive routine of virtual meetings (due to time zone differences and the geographical allocation of the global team, with no team in Argentina).Desirable Skills:● Knowledge of control frameworks and standards such as SOC2, ISO 27001, NIST, etc.● Experience with security and risks for cloud environments.● Experience with regulatory requirements and auditing.
Modelo híbrido (2 días presenciales) en Munro, Buenos Aires.Modalidad de contratación: Relación de dependencia.